A reservation system that most travelers never see has quietly become a shared vulnerability, and Singapore Airlines is now counting its share of the damage. Roughly 46,000 booking records may have been touched by an incident at Amadeus, the technology provider behind its bookings, and for a smaller group of about 620 people, contact details and travel document information may have been seen as well. The airline stresses that payment data appears to have stayed safe and that its own systems were not breached, while asking customers with upcoming journeys to change their booking references. Tak
Singapore Airlines Says 46,000 Booking Records May Be Affected by Amadeus Data Breach
The weak point sat with the supplier, and several airlines are now disclosing separately
Mark
Start with the number. Forty-six thousand booking records. Is that forty-six thousand people?
Mimi
Not necessarily. The airline says records, and it says they may have been affected. A booking can cover more than one traveller, and the wording is careful.
Luke
Right, and that's the first gap. "May have been affected" is not "were exposed." The reporting doesn't tell us how the airline arrived at the figure.
Mark
What was in those records?
Mimi
Names, booking reference numbers, itineraries and booking classes for most. For about 620 records, possibly emails, phone numbers, travel document details and KrisFlyer numbers too.
Mark
And payment details?
Luke
Singapore Airlines says Amadeus confirmed no bank or card information leaked and bookings weren't changed. That's relayed from the vendor, not independently verified in this report.
Mimi
Still, it explains the practical fix. Customers with upcoming trips are being asked to change booking reference numbers.
Mark
Why does it matter that Singapore Airlines' own systems weren't breached?
Mimi
It shows how many carriers share one supplier. The weak point sat with Amadeus, and several airlines are now disclosing separately.
Luke
Be careful comparing them, though. Cathay said 53,000 bookings, Japan Airlines said 92,000 customers. Different units. And Amadeus hasn't said how many people were affected overall.
Der Puls
- A breach at a single behind-the-scenes booking provider is rippling outward, touching airlines far beyond the one that first reported it.
- Singapore Airlines says about 46,000 booking records may be exposed, with roughly 620 carrying far more sensitive personal details.
- Customers with trips ahead are being urged to change their booking reference numbers before a stray reference can be used to track their travel.
- Amadeus has acknowledged a vulnerability but has not said how many customers were affected, leaving the full scale unclear and the picture still shifting.
A reservation system that most travelers never see has quietly become a shared vulnerability, and Singapore Airlines is now counting its share of the damage. Roughly 46,000 booking records may have been touched by an incident at Amadeus, the technology provider behind its bookings, and for a smaller group of about 620 people, contact details and travel document information may have been seen as well. The airline stresses that payment data appears to have stayed safe and that its own systems were not breached, while asking customers with upcoming journeys to change their booking references. Taken together, the disclosure is one more chapter in a story that is still being written, as the number of affected travelers depends on what the provider itself has yet to say.
On Tuesday, Singapore Airlines disclosed that about 46,000 of its booking records may have been affected by a cybersecurity incident at Amadeus, the company that supplies its reservation technology. The airline was careful to describe this as a possible exposure rather than a confirmed count of compromised customers.
For most of those records, the exposed information includes names, booking references, itineraries and booking classes. For roughly 620 records, email addresses, phone numbers, travel document details and KrisFlyer numbers may also have been accessed. Singapore Airlines says payment data was not leaked, bookings were not altered, and its own systems were not breached.
As a precaution, the airline is contacting customers with upcoming trips so they can change their booking references, since an exposed reference could be used to look up a journey. Amadeus, for its part, has acknowledged a vulnerability in a travel booking display environment but has not said how many customers were affected.
Singapore Airlines is not alone. Cathay Pacific, Japan Airlines, Asiana Airlines and Malaysia Airlines have all reported related exposure, with figures counted in different units that do not reconcile neatly. What comes next is whether Amadeus publishes its own accounting and whether more carriers disclose. For travelers on Singapore Airlines, the immediate task is watching for that message about booking references.
On Tuesday, Singapore Airlines told the public that roughly 46,000 of its booking records may have been affected by a cybersecurity incident at Amadeus, the company that supplies its reservation technology. The airline framed the figure as a possible exposure, not a confirmed count of compromised customers.
Singapore's flag carrier is the latest to disclose fallout from the Amadeus breach. Cathay Pacific Airways, Japan Airlines and South Korea's Asiana Airlines, among others, have reported that customer data was compromised. Malaysia Airlines has also said some of its customer information may have been affected.
For most of the 46,000 records, Singapore Airlines said the exposed data included customers' names, booking reference numbers, travel itineraries and booking classes. For a much smaller group, about 620 booking records, the airline said more sensitive details may also have been accessed: email addresses, phone numbers, travel document details and KrisFlyer membership numbers.
The airline passed along two assurances it attributed to Amadeus. Bank account and credit card information was not leaked, and bookings were not modified. Singapore Airlines also said its own IT systems were not breached, placing the incident on the provider's side of the relationship.
As a precaution, the airline said it is contacting affected customers who have upcoming travel plans so they can change their booking reference numbers. The step is aimed at the practical risk that a reference number, once exposed, could be used to look up a trip.
Amadeus has said it became aware of a vulnerability affecting a travel booking display environment. It did not respond when asked how many customers' data had been affected, so the overall scale of the breach across airlines remains unstated by the company itself.
Other carriers have supplied their own numbers in recent days. Cathay Pacific reported that the breach involved data tied to 53,000 bookings, while Japan Airlines reported 92,000 customers. The two figures count different things, bookings in one case and customers in the other, so they do not add up neatly alongside Singapore Airlines' 46,000 booking records.
What to watch next is whether Amadeus publishes its own accounting of the breach, and whether more airlines that use its systems disclose exposure. For Singapore Airlines customers, the immediate signal is a message from the carrier about changing a booking reference if a trip is coming up.
Bemerkenswerte Zitate
Amadeus confirmed that bank account or credit card information had not been leaked and bookings were not modified.— Singapore Airlines (paraphrased)
Möchten Sie die ganze Geschichte?
Das Original lesen bei The Star ↗
Technology